CVE-2022-22987 CRITICAL

CVE-2022-22987: Advantech ADAM-3600

Vendor Advantech

Product ADAM-3600

Weakness CWE-321

Published February 4, 2022

Last update April 16, 2025

View on NVD All CVEs

CVSS base score

9.8/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

The affected product has a hardcoded private key available inside the project folder, which may allow an attacker to achieve Web Server login and perform further actions.

Key dates

02Disclosure timeline

February 4, 2022 CVE published

April 16, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-22987 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/321.html

Related vulnerabilities

04Related CVE

CVE-2024-5722 Logsign Unified SecOps Platform HTTP API Hard-coded Cryptographic Key Remote Code Execution Vulnerability CVE-2025-34500 Shuffle Master Deck Mate 2 Insecure Update Chain CVE-2025-54807 Dover Fueling Solutions ProGauge MagLink LX 4 Devices Use of Hard-coded Cryptographic Key CVE-2025-43483 Poly Clariti Manager - Multiple Security Vulnerabilities CVE-2025-8625 Copypress Rest API 1.1 - 1.2 - Missing Configurable JWT Secret and File-Type Validation to Unauthenticated Remote Code Execution